Access control apparatus, access control method, and access control program

ABSTRACT

Additional information indicating photographic conditions for a received image signal is compared with additional information indicating photographic conditions for an access target image signal. If the both conditions satisfy a predetermined relationship, an access to the access target image signal is permitted.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an access control apparatus forcontrolling an access to an image.

2. Description of the Related Art

As the Internet and digital cameras are widespread, an imagedistribution service for uploading an electronic image to a server onthe Internet, opening the electronic image on a website, and therebyenabling many people to view the image is used.

In the service, if a user who opens the image is to restrict viewingusers, an access control using a password is popular.

The user who opens the image sets a password on a website for the accesscontrol, and notifies each viewing user whom the user wants to view theimage of the set password by means such as a telephone or an email.

The viewing user who is notified of the password accesses the websiteand inputs the password, thereby permitting the viewing user to accessthe image and to view the image.

European Patent Publication No. EP614308A1 discloses a technique forcontrolling an access to an additional component for generating a highresolution image, using an authentication code, a key, and a password.

Japanese Patent Application Laid-Open No. 2001-195146 discloses thefollowing technique. A subject image is photographed, registered(stored) as a secret key image, and made to correspond to stored secretinformation. When the secret information is to be viewed, an image equalin shape to the secret image is photographed. If the photographed imageis compared with the secret key image and coincident with the secretkey, a secret is unlocked and the secret information is displayed.

SUMMARY OF THE INVENTION

The present application is intended to provide a conventionally-unknownor novel access control method. Examples of disadvantages solved whenthe invention according to the present application is carried out are asfollows.

It is difficult to say that a password input operation for an apparatus,such as a digital television set, having an input device to which arestriction is given is easily performed by a user unfamiliar with theoperation. Unlike a keyboard, an operating system, in particular, maypossibly differ among manufacturers or apparatuses. In addition, thereis a sufficient probability that some apparatuses include input devicesundesirable to input the set password.

Further, the user who sets the password needs to notify each viewinguser whom the user wants to view the image, and if the number of viewingusers is large, a burden is increased. Besides, it is difficult to saythat use of the email which can hold a broadcast communication isavailable, due to presence of the restriction to the input device.

Further, the user who receives the notification of the password muststore the password using some means. If the number of user's websites tobe viewed increases, a burden related to password storage and managementis increased.

It is an object of the present invention to control an access by asimple operation and improve operationality.

According to one aspect of the present invention, an access controlapparatus of the present invention is an access control apparatus forcontrolling an access to an image signal through a network, comprising:

a control circuit that compares additional information indicatingphotographic conditions for the image signal received through thenetwork with additional information indicating photographic conditionsfor a stored image signal, and that controls the access to the storedimage signal for a sender of the received image signal according toresults of the comparison.

An access permission means herein a permission to an operation based onan image signal such as a permission to display an image based on theimage signal, a permission to print an image based on the image signal,or a permission to store an image based on the image signal.

Preferably, the access control apparatus further comprises: an imagesignal registration circuit that stores an image signal in a storagedevice while relating the image signal to the additional informationindicating the photographic conditions; and an access restrictionsetting circuit that sets an access restriction to the image signalstored in the storage device.

Preferably, the access control apparatus further comprises a displaysection that displays an image based on the image signal stored in thestorage device, wherein the access restriction setting circuit includesa function of selecting an access-restricted image from among aplurality of images displayed in the display section.

Preferably, the additional information indicating the photographicconditions includes at least one of date information, time information,location information, and apparatus identification information.

According to another aspect of the present invention, there is providedan access control method for controlling an access to an image signalthrough a network, the method comprising steps of:

receiving additional information indicating photographic conditions forthe image signal through the network;

comparing the additional information indicating the photographicconditions for the received image signal with additional informationindicating photographic conditions for an access target image signal,and determining whether the photographic conditions for the receivedimage signal and the photographic conditions for the access target imagesignal satisfy a predetermined relationship; and

permitting the access to the access target image signal if a comparisonresult shows that the photographic conditions for the received imagesignal and the photographic conditions for the access target imagesignal satisfy the predetermined relationship.

Preferably, the access control method further comprises steps of:receiving the access target image signal and the additional informationindicating the photographic conditions for the access target imagesignal; receiving a selection as to whether to restrict the access tothe access target image signal; storing the access target image signal,the additional information on the access target image signal, andinformation as to whether the access to the image signal is restrictedwhile relating the access target image signal, the additionalinformation, and the information as to whether the access to the imagesignal is restricted to one another; receiving a request of the accessto a stored image signal; determining whether the access to theaccess-requested image signal is restricted; and requesting transmissionof an image signal including the additional information through thenetwork to an access requester if the access to the access-requestedimage signal is restricted, and permitting the access to theaccess-requested image signal if the access is not restricted.

Preferably, the additional information indicating the photographicconditions includes at least one of date information, time information,location information, and apparatus identification information.

According to yet another aspect of the present invention, there isprovided an access control program for causing a control sectionincluded in an access control apparatus that controls an access to animage signal through a network, to execute steps of: receivingadditional information indicating photographic conditions for the imagesignal through the network; comparing the additional informationindicating the photographic conditions for the received image signalwith additional information indicating photographic conditions for anaccess target image signal, and determining whether the photographicconditions for the received image signal and the photographic conditionsfor the access target image signal satisfy a predetermined relationship;and permitting the access to the access target image signal if acomparison result shows that the photographic conditions for thereceived image signal and the photographic conditions for the accesstarget image signal satisfy the predetermined relationship.

The present invention can provide an operating environment in which anaccess restriction can be controlled by a simple operation, and canimprove an operationality.

Further, since a plurality of levels or stages of access controls can beexercised by combining the method according to the present inventionwith a known access management method using a password or the like, itis possible to realize a setting and a removal of a complicated accessrestriction by a simpler operation.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram that depicts a schematic configuration of anaccess control apparatus according to a first embodiment of the presentinvention;

FIG. 2 is a block diagram that depicts a configuration of an accesscontrol system including the access control apparatus according to thefirst embodiment of the present invention;

FIG. 3 is a schematic diagram of a remote controller;

FIGS. 4A and 4B are explanatory views for examples of a screenconfiguration and a user's operation for registering an applicationsoftware executed by an access restriction setting-side digitaltelevision set;

FIGS. 5A to 5D are explanatory views for examples of a screenconfiguration and a user's operation for removing a access control overthe application software executed by an access restriction removal-sidedigital television set;

FIG. 6 is a flowchart that depicts an interaction between the accessrestriction setting-side digital television set and the access controlapparatus;

FIG. 7 is a flowchart that depicts an interaction between the accessrestriction removal-side digital television set and the access controlapparatus;

FIGS. 8A and 8B depict Exif tags used to set and remove the accessrestriction according to the first embodiment of the present invention;

FIGS. 9A and 9B are explanatory view for a content database held in astorage section of the access control apparatus according to the firstembodiment of the present invention;

FIG. 10 is an explanatory view for an Exif image transmitted as anunlock image from the access restriction removal-side digital televisionset to the access control apparatus according to the first embodiment ofthe present invention;

FIGS. 11A and 11 b are explanatory view for an access restrictionremoval determining method according to the first embodiment of thepresent invention;

FIG. 12 is a block diagram that depicts a schematic configuration of anaccess control apparatus according to a second embodiment of the presentinvention;

FIG. 13 is a block diagram that depicts a configuration of an accesscontrol system including the access control apparatus according to thesecond embodiment of the present invention;

FIG. 14 is a flowchart for describing an open image registration and anaccess setting performed by the access control apparatus according tothe second embodiment of the present invention; and

FIG. 15 is an explanatory view for a content database held in a storagesection of the access control apparatus according to the secondembodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS First Embodiment

A first embodiment of the present invention will be describedhereinafter in detail with reference to the drawings.

FIG. 1 is a block diagram that depicts a schematic configuration of anaccess control apparatus according to a first embodiment of the presentinvention. FIG. 2 is a block diagram that depicts a configuration of anaccess control system including the access control apparatus accordingto the first embodiment of the present invention.

An access control apparatus 100 includes basic functions of a WEB serverpresent on the Internet, and provides these functions to each clientmachine. Reference symbol 101 denotes a communication section connectedto the Internet and holding a communication with an external clientmachine. Reference symbol 102 denotes an image signal reception sectionthat receives a lock image for an access restriction setting, to bedescribed later, and an unlock image for an access restriction removal,to be described later. Reference symbol 103 denotes an image signaltransmission section that transmits an image to an access-permittedclient machine. Reference symbol 104 denotes a control section (controlcircuit) that integrally controls an overall operation for the accesscontrol. Reference symbol 105 denotes a storage section (storage device)that stores a content database, to be described later, for each album.Reference symbol 106 denotes a random-access memory (RAM) appropriatelyused by the control section 104.

Referring to FIG. 2, reference symbols 201 and 202 denote digitaltelevision sets serving as client machines according to the firstembodiment. Each of the digital television sets 201 and 202 communicateswith the access control apparatus 100 through a gateway 203 a or 203 band the Internet 200. Each of the digital television sets 201 and 202also includes an operating environment in which an application software,to be described later, can be run.

FIG. 3 depicts an outline of a remote controller annexed to each of thedigital television sets 201 and 202. Reference symbol 300 denotes aremote controller main body. Reference symbol 301 denotes a “Direction”key for moving a cursor or the like displayed on a screen using theapplication software. Reference symbol 302 denotes an “Enter” key forexecuting an item selected by moving the cursor or the like. Reference303 denotes a “Return” key used for cancellation and the like. Reference304 denotes a “Register” key for registering the lock image and theunlock image to be described later.

Remote control keys other than the keys stated above are present on theremote control main body for executing the basic functions of thedigital television set. The keys (e.g., Ten keys and channel UP/DOWNkeys shown in FIG. 3) that do not contribute to the present inventionwill not be described herein.

FIGS. 4A and 4B and FIGS. 5A to 5D depict examples of screenconfigurations of application software executed by the accessrestriction setting-side digital television set 201 and the accessrestriction removal-side digital television set 202, respectively.

Referring to FIGS. 4A and 4B, the image configuration and a user'soperation for the access restriction setting-side digital television 201will first be described.

FIG. 4A depicts a display screen of an Internet image viewingapplication software (hereinafter, “image viewing software”) displayedon the digital television set 201. The display screen shown in FIG. 4Ais in a state in which an image stored in a digital camera or a memorycard connected to the digital television set 201 is displayed on thescreen, and in which the image can be viewed.

The user inputs the “Register” key 304 on the remote controller so as toregister an image in the access control apparatus 100 serving as the WEBserver. The screen of the image viewing software is thereby changed to aregistration screen shown in FIG. 4B, which screen is in a state inwhich the image can be registered. The user first selects a registrationWEB sever (access control apparatus) in a registration server selectionarea 406. Using the “Direction” key 301, the user moves a cursor 401 onthe screen to the image to be registered and inputs the “Enter” key 302,thereby putting a check mark that represents registration in aregistration check box 403 (note that a state of the check box in whichthe check mark representing registration is put is denoted by referencesymbol 404). If the user is further to set an access restriction to acontent using a certain image, then the cursor 401 is put on the imageto be designated for the access restriction (hereinafter, “lock image”)while the registration check mark is put in the registration check box403 of the lock image (404), and inputs the “Enter” key 302. At thistime, a check mark 405 representing that the image is selected as thelock image is put in the registration check box 403. When the userinputs the “Enter” key 302 again in this state, both the registrationand the lock image selection setting are cancelled. Further, on theregistration screen, a guide that represents a series of operations isdisplayed to the user as indicated by 407. By inputting the“Registration” key 304 when the registration and the lock imageselection setting are finished, the registration and the accessrestriction setting are completed. Namely, image data in an Exif(Exchangeable Image File) format on the user's selected image as well asinformation as to whether the access control is present and the like isstored in the storage section 105 of the access control apparatus 100.The control section 104 corresponds to an image signal registrationcircuit and an access restriction setting circuit.

In this embodiment, it is assumed to use the Exif format widely used asthe format of registered and lock image data in digital cameras and thelike. The image data in the Exif format corresponds to an image signalthat includes additional information. It is noted, however, that theimage format according to the present invention is not limited to theExif format, but that an arbitrary format of the image data includingthe image information and the additional information can be used.

Referring to FIGS. 5A to 5D, the screen configuration and the user'soperation for the access restriction removal-side digital television set202 will next be described.

The viewing user starts the image viewing software and designates theviewing target WEB server (access control apparatus), whereby theviewing user can view a list of thumbnail images registered in the WEBserver. As shown in FIG. 5A, if the access-restricted lock image isincluded in the images registered in the viewing target server, and theviewing user is to display an original images from one of the thumbnailimages, then a message, denoted by reference symbol 501, requesting theviewing user to remove the access restriction is displayed. At thistime, by the viewing user's inputting the “Enter” key 302 in response tothe message requesting the viewing user to remove the access restrictionor with passage of a predetermined time, a screen is changed from thatshown in FIG. 5A to that shown in FIG. 5B.

To remove the access restriction, the viewing user selects an imagesimilar in time and location to the image registered in the server andthe thumbnail of which is displayed in the list of thumbnail images fromamong Exit images owned by the viewing user (present in a local memory),and transmits the selected image to the WEB server, i.e., the accesscontrol apparatus 100. Reference symbol 502 denotes an operation windowfor selecting the image (unlock image) for the access restrictionremoval from among the images stored in the local memory. Using the“Direction” key 301 and the “Enter” key 302, the viewing user determineswhich image is to be selected in the operation window 502. At this time,a guide that represents operations is displayed to the user as indicatedby 503. By inputting the “Registration” key 304 when the viewing userfinishes selecting the unlock image, the unlock image is transmitted tothe WEB server, i.e., the access control apparatus.

If the set lock image and the transmitted unlock image satisfy apredetermined relationship, or more specifically, if the unlock imagefalls within a specific range of the lock image in terms of time andlocation, the viewing user can view the desired original image(indicated by reference symbol 504) as shown in FIG. 5C. If the unlockimage is out of the specific range of the set lock image in terms oftime and location, a message denoted by reference symbol 505 isdisplayed on the screen, on which screen the viewing user needs todetermine whether to select and transmit the unlock image again or tocancel the unlock image. If the viewing user determines to cancel theunlock image, the viewing user is not permitted to view the desiredoriginal image.

An access restriction removal determining method carried out by theaccess control apparatus will be described later in detail.

FIG. 6 is a flowchart that depicts an interaction between the accessrestriction setting-side digital television set 201 and the accesscontrol apparatus 100 serving as the WEB server.

As already described, the access restriction setting-side digitaltelevision set 201 designates the access control apparatus 100 as theserver in which images are registered by a user's operation (at a stepa1). The access restriction setting-side digital television set 201 thentransmits the registered images and the lock image designated by theuser's operation to the access control apparatus 100 (at a step a2).Thus, the access restriction setting-side digital television set 201completes the registration and the access restriction setting (at a stepa3).

On the other hand, the access control apparatus 100 receives theregistered images and the lock image from the access restrictionsetting-side digital television set 201 through the communicationsection 101 (at a step b1). The access control apparatus 100 then storesthe received images as well as information for identifying a senderapparatus in the content database held in the storage section 105 to bedescribed later (at a step b2).

FIG. 7 is a flowchart that depicts an interaction between the accessrestriction removal-side digital television set 202 and the accesscontrol apparatus 100 serving as the WEB server.

The access restriction removal-side digital television set 202designates' the access control apparatus 100 as the WEB server in whichthe stored images are to be viewed, by a viewing user's operation (at astep c1). The access restriction removal-side digital television set 202transmits a request of transmitting thumbnail images of all theregistered images, to the designated access control apparatus 100 (at astep c2). The access control apparatus 100 that receives the requesttransmits the thumbnail images to the digital television set 202 whichtransmits the request (at steps d1 and d2). The access restrictionremoval-side digital television set 202 receives the thumbnail images(at a step c3), and displays the list of thumbnails (at a step c4).

When one of the thumbnail images is selected to view the original imagein detail by a viewing user's operation, the access restrictionremoval-side digital television set 202 transmits a request oftransmitting the original image corresponding to the selected thumbnailimage, to the access control apparatus 100 (at a step c5).

The access control apparatus 100 that receives the request oftransmitting the original image confirms whether an access restrictionis set to the registered images by referring to the content databaseheld in the storage section 106 to be described later (at steps d3 andd4).

If no access restriction is set to the registered images, the accesscontrol apparatus 100 transmits the requested original image to theaccess restriction removal-side digital television set 202 (at a stepd8). The digital television set 202 that receives the original imagedisplays the original image on the display (at steps c9 and c10). If theviewing user finishes viewing the image, the processing returns totelevision viewing and the power of the digital television set 202 isturned off (at steps c11 and 12). If the viewing user does not finishviewing the image, the processing returns to the display of the list ofthumbnail images (at the step c4). In addition, although not shown here,it is possible for the viewing user to finish the software for viewingthe image as the application software in the state of the display of thelist of thumbnail images, and then to move to television viewing, otherapplication software, or the like, or to turn off the power.

If the access control apparatus 100 detects that the access restrictionis set to the registered images, the access control apparatus 100transmits a request of transmitting an Exit image, as an unlock imagefor removing the access restriction, to the access restrictionremoval-side digital television set 202 (at a step d5). The accessrestriction removal-side digital television set 202 that receives therequest selects the unlock image by the above-stated viewing user'soperation and transmits the unlock image to the access control apparatus100 (at steps c6, c7, and a8). If the user does not select the unlockimage, the access restriction removal-side digital television set 202 isnot permitted to view the original image and the processing returns tothe display of the list of thumbnail images (at the step c4).

The access control apparatus 100 that receives the unlock imagedetermines whether to give an access permission to the accessrestriction removal-side digital television set 202 by the accessrestriction removal determining method to be described later (at stepsd6 and d7). If the access control apparatus 100 determines to give theaccess permission, the access control apparatus 100 transmits theoriginal image to the access restriction removal-side digital televisionset 202 (at a step d8). If the access control apparatus 100 determinesnot to give the access permission, the access control apparatus 100transmits again the request of transmitting the unlock image to theaccess restriction removal-side digital television set 202 (at the stepd5)

Through the process flow, the access restriction setting and the accessrestriction removal are performed.

FIGS. 8A and 8B depict Exif tags used to set and remove the accessrestriction according to the first embodiment of the present invention.In this embodiment, date information shown in FIG. 8A and GPSinformation shown in FIG. 8B are used.

FIGS. 9A and 9B are explanatory view for a data configuration of thecontent database held in the storage section 105 of the access controlapparatus 100. The access control apparatus 100 stores the Exif imagesreceived from the access restriction setting-side digital television set201 in the storage section 105 as the registered images and the lockimage as shown in FIG. 9A.

In FIG. 9A, in a “registering apparatus” box, a value for identifyingthe apparatus that registers each Exit image is input. In thisembodiment, a MAC address is input. In an “image group identifier” box,an identifier intended to identify a folder for bundling a plurality ofimage files and to represent an album unit is input. In this embodiment,if the user designates a folder name, the image group identifiercorresponding to the designated folder name is allocated. If the userdoes not designate any folder name, an identifier related to thecorresponding MAC address is allocated by default. In an “imageidentifier” box, a file name to identify each Exif image is input. In an“access restriction” box, a value indicating whether the Exif image isthe lock image used for the access restriction setting is input.

As for the Exif image registered as the lock image, the Exit data needsto include tags related to dates and locations as the additionalinformation representing photographic conditions as shown in FIG. 9B. Asfor dates and time, the tags related to the date information shown inFIG. 8A are used. As for GPS, the tags related to the GPS informationshown in FIG. 8B are used.

FIG. 10 is an explanatory view for an Exif image transmitted as theunlock image from the access restriction removal-side digital televisionset 202 to the access control apparatus 100. In FIG. 10, referencesymbol 1000 denotes an example of a displayed image of the unlock image,and 1001 denotes a part of the information stored in the image as theExif data, i.e., the additional information.

The access control apparatus 100 compares a date, a time, and GPSinformation of the received unlock image with a date, a time, and GPSinformation of the lock image stored in the content database held in thestorage section 105. If determining that the unlock image and the lockimage are similar in time and location, the access control apparatus 100gives an access permission to the access restriction removal-sidedigital television set 202 that is the sender of the unlock image.

FIGS. 11A and 11 b depict the access restriction removal determiningmethod. If the number of lock images stored in the content database isone, a certain error is set in each of a time direction, a latitudedirection, and a longitude direction relative to a time, a latitude, anda longitude of the lock image (the lock image having the time, thelatitude, and the longitude is denoted by reference symbol 1101),respectively, as shown in FIG. 11A, thereby determining an accesspermission range. The access permission range corresponds to, forexample, a rectangular parallelepiped indicated by oblique lines shownin FIG. 11A. This error may be an arbitrary default owned by the accesscontrol apparatus 100 or may be set by the access restrictionsetting-side digital television set 201 by a user's operation. Further,as shown in FIG. 11B, if the number of lock images stored in the contentdatabase is two or more (respective lock images having individual times,latitudes, and longitudes are denoted by reference symbols 1102 to1105), a range that contains the times, the latitudes, and thelongitudes of all the lock images is set as the access permission range.Similarly to FIG. 11A, the access permission range corresponds to, forexample, a rectangular parallelepiped indicated by oblique lines asshown in FIG. 11B.

If the time, the latitude, and the longitude included in the Exif dataon the unlock image received by the access control apparatus 100 areincluded in the access permission range, the access control apparatus100 gives the access permission to the access restriction removal-sidedigital television set 202 that is the sender of the unlock image.

Using the above-stated method, the access control according to thepresent invention can be realized.

In the first embodiment, for the sake of description, the “Register” keyand the “Return” key are provided as the buttons on the remotecontroller. As long as equivalent functions for the “Register” key andthe “Return” key are allocated to the remote controller, the presentinvention is not limited to the instance of providing these buttons ofthe “Register” key and the “Return” key.

In the first embodiment, the access restriction is set to each imagegroup. Alternatively, the access restriction can be set to a certainimage.

Furthermore, in this embodiment, the access restriction is set only tothe viewing of the original image. Alternatively, a plurality of levelsof access restrictions such as a setting of the other unlock image andan error of an access permission range for permission of storing theviewed original image can be set.

Moreover, in this embodiment, the unlock image is transmitted forremoving the access restriction. Actually or alternatively, after theuser selects the image, only the Exif data necessary for the accessrestriction removal may be transmitted.

Through the above-stated flow, the program for running a computer in acontrol circuit of a server (access-control side) and the program forrunning a computer in a control circuit of a digital television(access-requested side) are performed, respectively.

Preferably, Internet is used as a network between an access controlapparatus and an access-requested apparatus. However, other networkexcept Internet can be used.

As described above in the first embodiment, the server as the accesscontrol apparatus and digital television as the access-requestedapparatus have a chassis, respectively.

Moreover, a user can place the digital television at a predeterminedposition, provided that the digital television can be connect to theaccess control apparatus trough a network.

Accordingly, a user can set relative positioning relationship betweenthe access-requested apparatus and the access control apparatus,provided that the access-requested apparatus can be connect to theaccess control apparatus trough a network.

Second Embodiment

A second embodiment of the present invention will be described. Thesecond embodiment of the present invention characteristically differsfrom the first embodiment in the access control apparatus and the accessrestriction setting-side digital television set.

Only the differences of the second embodiment from the first embodimentwill be described herein. Same constitutions and operations as thoseaccording to the first embodiment are denoted by the same referencesymbols as those used in the first embodiment, respectively.

FIG. 12 is a block diagram that depicts a schematic configuration of anaccess control apparatus according to the second embodiment of thepresent invention. FIG. 13 is a block diagram that depicts aconfiguration of an access control system.

Referring to FIG. 12, reference symbol 1200 denotes the access controlapparatus that also functions as a digital television set. Namely, theaccess control apparatus 1200 is a combination of the access controlapparatus 100 and the access restriction setting-side digital televisionset 201 according to the first embodiment.

The access control apparatus 1200 according to the second embodimentincludes a digital television main body section 1201, a remotecontroller signal reception section 1202, and a remote controller 300 aswell as the functions of the access control apparatus 100 according tothe first embodiment. The digital television main body section 1201includes functions that constitute a basic digital television set, e.g.,a tuner, a demultiplexer, a decoder, an operation panel, and a display(display section), all of which are not shown.

Referring to FIG. 13, reference symbol 1200 denotes the access controlapparatus that includes the digital television function according to thesecond embodiment. The access control apparatus 1200 communicates withan access restriction removal-side digital television set 202 that is aclient machine, through gateways 203 a and 203 b and the Internet 200.

The access restriction setting screen configuration and the user'soperation for the access control apparatus 1200 are equal to those shownin FIGS. 4A and 4B except that the server registration related functionis eliminated. Likewise, the access restriction removal screenconfiguration and the user's operation of the access restrictionremoval-side digital television set 202 are completely equal to thoseshown in FIGS. 5A to 5D.

FIG. 14 is a flowchart for an open image registration and an accesssetting performed by the access control apparatus 1200.

The access control apparatus 1200 selects registered images and a lockimage designated by a user's operation (at a step e1). The selectedregistered images and lock image are stored in a content database heldin a storage section 105 to be described later (at a step e2). Thus, theopen image registration and the access setting performed by the accesscontrol apparatus 1200 are completed (at a step e3).

A flowchart that depicts the interaction between the access restrictionremoval-side digital television set 202 and the access control apparatus1200 for the access restriction removal is equal to that shown in FIG.7.

FIG. 15 depicts an example of the content database held in the storagesection 105 according to this embodiment. The difference of the contentdatabase according to the second embodiment from that according to thefirst embodiment is that the content database does not hold informationon the registering apparatus for identifying an apparatus. In addition,if the user does not designate an image group identifier, a serialnumber in ascending order is allocated by default.

An access restriction removal determining method by transmitting theunlock image from the access restriction removal-side digital televisionset 202 to the access control apparatus 1200 is equal to that accordingto the first embodiment.

The access control system constituted as stated above can exercise thesame control as that exercised according to the first embodiment,thereby realizing the access control according to the present invention.

Third Embodiment

A third embodiment of the present invention will be described. The thirdembodiment characteristically differs from the first and the secondembodiments in access restriction removal determining method.

Only the difference of the third embodiment from the first and thesecond embodiment will be described herein.

The access restriction removal determining method according to the thirdembodiment differs from that according to the first and the secondembodiments in that an apparatus identifier recorded in Exif data isused for the access restriction removal determination.

When an image is photographed, a digital camera stores an apparatusidentifier of an information terminal obtained from a subject in aMarkerNote tag (tag No. 0x927C) of Exif data on the image.

This apparatus identifier suffices to be able to uniquely identify eachapparatus similarly to, for example, an MAC address. In this embodiment,it is assumed that the apparatus identifier is constituted by former 24bits corresponding to each manufacture-specific address managed by IEEEand latter 24 bits corresponding to an eigenvalue that is allocated byeach manufacture and that is not overlapped with the other eigenvalues,that is, the apparatus identifier is constituted by 48 bits in all.

Further, this apparatus identifier is transmitted from the informationterminal, which includes, for example, a wireless IC tag, to the digitalcamera, which includes, for example, a wireless IC tag reader.

An access control apparatus 100 makes a setting of giving an accessrestriction to a specific image group using the apparatus identifier,and displays a list of thumbnail images.

A user of an access restriction removal-side digital television set 202photographs the information terminal which the user held when the useris photographed as a subject using a digital camera equal inconfiguration to the above-stated digital camera so as to remove theaccess restriction and to view an original image, and transmits thephotographed image to the access control apparatus 100 as an unlockimage.

The access control apparatus 100 determines whether an apparatusidentifier described in a MarkerNote tag of Exif data on the receivedunlock image has a predetermined relationship with each of all originalimages corresponding to the thumbnail images displayed as the list, thatis, determines whether the apparatus identifier is present in theMarkerNote tag on the Exif data on each of the original images. If theapparatus identifier is present, the access restriction is removed. Itis noted that the apparatus identifier described in the MarkerNote tagcorresponds to information that indicates photographic conditions.

By thus constituting the access restriction removal determining method,it is possible to set a stricter access control than those according tothe first and the second embodiments. Further, by combining the accessrestriction removal determining method using the time and locationinformation included in the Exit data according to the first and thesecond embodiments with the determining method according to thisembodiment, it is possible to exercise a plurality of levels of accesscontrols.

Fourth Embodiment

A fourth embodiment of the present invention will be described. Thefourth embodiment of the present invention is characterized in that anaccess restriction setting and an access restriction removal differbetween stages.

Only the difference of the fourth embodiment from the first to the thirdembodiments will be described herein.

An access control apparatus according to this embodiment is equal tothose according to the first to the third embodiments in that an unlockimage is necessary to remove an access restriction when an originalimage is to be viewed. Further, the access control apparatus accordingto this embodiment exercises another access control using a passwordthat is already widespread when an original image is to be stored.

Namely, as a first access restriction, the access control apparatusrequests an access restriction removal-side digital television set totransmit the unlock image so as to give an access permission to anoriginal image. As a second access restriction, the access controlapparatus requests the access restriction removal-side digitaltelevision set to input a password so as to give a permission to storethe original image that is being viewed.

If a user of the access restriction removal-side digital television setcan transmit an appropriate unlock image to the access control apparatusso as to remove the access restriction, the user is permitted to viewthe original image. In addition, if the user of the access restrictionremoval-side digital television set recognizes an appropriate password,the user can store the image in the access restriction removal-sidedigital television set that is a digital television set of the user.

As can be seen, the access control apparatus according to thisembodiment exercises not only the access control using the unlock imagebut also the access control using the password, whereby a plurality oflevels or stages of access restrictions can be set and removed.

According to this embodiment, it is determined whether to remove theaccess restriction based on the unlock image so as to access theoriginal image, and it is determined whether to remove the accessrestriction based on the password so as to store the original image.Alternatively or conversely, the determination based on the password maybe conducted so as to access the original image, and the determinationbased on the unlock image may be conducted so as to store the originalimage.

According to this embodiment, both the unlock image and the password areused to exercise the access controls by stages, respectively.Alternatively, transmission of both of the unlock image and the passwordcan be requested in each access control so as to realize a stricteraccess control.

This application claims priority from Japanese Patent Application No.2004-015919 filed Jan. 23, 2004, and Japanese Patent Application No.2005-008723 filed Jan. 17, 2005, which are hereby incorporated byreference herein.

1.-8. (canceled)
 9. A content processing apparatus, comprising: adisplay control unit configured to display, on a display device, aplurality of contents and a plurality of checkboxes respectivelycorresponding to the plurality of contents; a designation unitconfigured to designate at least one of the checkboxes according to auser's operation; and a processing unit configured to perform apredetermined process on a content corresponding to a checkboxdesignated by the designation unit; wherein the display control unitdisplays a checkbox which is not designated by the designation unit in afirst appearance, wherein the display control unit displays the checkboxin a second appearance if the checkbox which has been displayed in thefirst appearance is further designated by the designation unit, whereinthe display control unit displays the checkbox in a third appearance ifthe checkbox which has been displayed in the second appearance isfurther designated by the designation unit, wherein the firstappearance, the second appearance and the third appearance are differentfrom each other, and wherein the processing unit performs a differentprocessing on the content corresponding to the checkbox displayed in thethird appearance than on the content corresponding to the checkboxdisplayed in the second appearance.
 10. A content processing apparatusaccording to claim 9, wherein the processing unit performs a firstprocessing on the content corresponding to the checkbox displayed in thesecond appearance, and performs the first and a second processing on thecontent corresponding to the checkbox displayed in the third appearance.11. A content processing apparatus according to claim 9, wherein if acheckbox which is displayed in the third appearance is designated by thedesignation unit, designation by the designation unit is cancelled. 12.A content processing apparatus according to claim 9, wherein thecontents include image data.
 13. A content processing apparatusaccording to claim 9, wherein the processing unit registers the contentcorresponding to the checkbox displayed in the second appearance to anexternal apparatus.
 14. A content processing apparatus according toclaim 9, wherein the processing unit selects the content correspondingto the checkbox displayed in the third appearance as a content foraccess restriction.
 15. A content processing apparatus according toclaim 9, wherein the processing unit registers the content correspondingto the checkbox displayed in the second appearance to an externalapparatus, and registers the content corresponding to the checkboxdisplayed in the third appearance to the external apparatus and selectsthe content corresponding to the checkbox displayed in the thirdappearance as a content for access restriction.
 16. A content processingapparatus according to claim 9, wherein the display control unitdisplays guidance about checkboxes displayed in the second and the thirdappearance with the plurality of checkboxes.
 17. A content processingapparatus according to claim 9, further comprising an indication unitconfigured to receive an instruction to instruct execution of theprocessing by the processing unit, wherein the processing unit performsthe predetermined process after the indication unit receives theinstruction.
 18. A content processing apparatus for registering imagedata to an access controlling apparatus which controls access toregistered image data, comprising: a display control unit configured todisplay, on a display device, a plurality of image data and a pluralityof checkboxes respectively corresponding to the plurality of image data;a designation unit configured to designate at least one of thecheckboxes according to a user's operation; a processing unit configuredto perform a predetermined process on image data; and an indication unitconfigured to receive an instruction to instruct execution of thepredetermined process by the processing unit from the user, wherein thedisplay control unit displays a checkbox which is not designated by thedesignation unit in a first appearance, wherein the display control unitdisplays the checkbox in a second appearance if the checkbox which hasbeen displayed in the first appearance is further designated by thedesignation unit, wherein the display control unit displays the checkboxin a third appearance if the checkbox which has been displayed in thesecond appearance is further designated by the designation unit, andwherein after the indication unit receives the instruction, theprocessing unit registers image data corresponding to checkboxesdisplayed in the second appearance and the third appearance to theaccess control apparatus, and selects image data corresponding to acheckbox displayed in the third appearance as data for accessrestriction to the registered image data.